The current "Cover II" rule for default fund collection in central clearing is intrinsically vulnerable. We solve for an optimal cover rule that trades off ex-post risk-sharing with ex-ante risk-shifting.